$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9a220d7-5639-321b-affa-8b3b76cf1716.roa File: a9a220d7-5639-321b-affa-8b3b76cf1716.roa (raw, json) Hash identifier: TICF/As0prGYUKuTXYSR6Wph8EZ08AqHv0xiW4VkL9s= Subject key identifier: 4F:23:74:24:2D:0C:00:9E:F4:0C:37:E5:57:A6:65:14:10:E0:B0:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC0B9165AD67C9B63E2D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9a220d7-5639-321b-affa-8b3b76cf1716.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.38.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:0b:91:65:ad:67:c9:b6:3e:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b95fd64b-01e7-4d92-bf88-66753bd88e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:d8:08:7f:93:4e:3c:c7:18:af:ce:d0:ad: 4b:bd:28:ec:00:14:f4:ea:0a:61:a9:59:9d:f6:8b: 9e:c7:41:1d:d3:e4:d9:df:d8:fe:e3:35:64:2a:cc: 81:c2:85:f5:f6:5c:95:1f:c1:5b:bb:f2:89:11:a5: ee:de:e0:4f:c4:a7:6a:24:15:dd:34:db:16:3f:e5: c9:e2:55:11:94:c7:d7:6a:ce:ac:dd:46:cf:d2:8c: 2d:ba:25:1f:5e:08:9e:6e:42:63:12:de:88:d4:19: 7b:f9:ec:e3:a0:ca:f1:df:b0:88:fa:21:8c:34:02: b0:51:11:97:88:41:5d:4b:af:58:f1:15:b9:e3:4e: b7:44:e4:5c:5a:c2:db:7c:71:34:8c:e9:25:83:2e: c1:fe:1f:da:45:58:9b:29:a7:3b:31:22:73:8b:d4: d8:0c:5b:40:88:12:91:3a:35:da:23:e0:04:c1:34: e0:87:68:e7:99:a7:0e:88:76:bd:da:67:b0:48:58: c4:25:99:d8:f9:0a:5c:86:f0:1b:a3:6b:44:e5:1a: e4:18:e7:49:9a:02:86:b4:88:8c:00:32:08:83:20: e8:ab:24:5f:71:35:89:0a:f0:44:00:9c:8e:36:cf: 34:49:28:a1:e9:dc:0a:fd:5f:d6:69:c0:e0:53:d8: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:23:74:24:2D:0C:00:9E:F4:0C:37:E5:57:A6:65:14:10:E0:B0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9a220d7-5639-321b-affa-8b3b76cf1716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.38.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:44:ba:b1:f3:c2:c6:32:a9:77:6b:7b:ae:01:bd:e3:f0:1f: 9b:3b:8f:1b:7f:d4:e9:01:48:d9:9e:0a:24:f9:0a:0d:8c:ce: c3:38:29:5d:70:69:10:0d:c2:01:9f:95:f9:f6:9c:de:46:38: 94:81:6c:05:fc:90:43:db:05:45:66:ef:f5:90:f4:1c:1d:25: 51:b4:97:14:7f:16:1a:44:cd:df:24:ef:a6:37:82:69:5e:f3: fc:18:f5:b8:14:89:15:1e:c8:ee:da:9f:47:0b:d0:fe:a5:9e: 3d:ce:4c:3b:50:ba:36:5e:64:d2:d7:0f:8c:2e:ae:d9:51:ba: d0:ed:8a:4a:7a:3c:f9:e4:e5:7f:44:03:57:a6:4e:c5:66:af: 4f:e8:19:33:09:26:30:80:5f:f3:0c:86:6e:4f:21:47:d7:73: ca:e0:9e:0b:4e:27:b3:16:96:a8:98:d7:91:41:ae:cc:e1:3c: 8d:2f:b2:cc:8a:d7:2d:79:64:1b:2c:3a:61:c8:9b:af:76:de: f9:9f:4c:1e:c4:53:a0:ba:22:ae:6c:a9:3c:c2:5d:d3:07:14: 02:ae:53:8a:07:6a:e3:d2:38:a0:78:98:88:5a:9e:8a:42:58: cb:7c:24:24:c9:a7:e3:3f:6e:f6:08:21:16:15:f2:39:c0:a4: 66:28:f5:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvAuRZa1nybY+LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Yjk1ZmQ2NGItMDFlNy00ZDkyLWJmODgtNjY3NTNiZDg4ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCvYCH+TTjzHGK/O0K1LvSjsABT06gphqVmd 9ouex0Ed0+TZ39j+4zVkKsyBwoX19lyVH8Fbu/KJEaXu3uBPxKdqJBXdNNsWP+XJ 4lURlMfXas6s3UbP0owtuiUfXgiebkJjEt6I1Bl7+ezjoMrx37CI+iGMNAKwURGX iEFdS69Y8RW54063RORcWsLbfHE0jOklgy7B/h/aRVibKac7MSJzi9TYDFtAiBKR OjXaI+AEwTTgh2jnmacOiHa92mewSFjEJZnY+QpchvAbo2tE5RrkGOdJmgKGtIiM ADIIgyDoqyRfcTWJCvBEAJyONs80SSih6dwK/V/WacDgU9gjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8jdCQtDACe9Aw35VemZRQQ4LAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlhMjIwZDctNTYzOS0z MjFiLWFmZmEtOGIzYjc2Y2YxNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZEurHzwsYyqXdre64BvePwH5s7jxt/1OkBSNmeCiT5Cg2MzsM4KV1w aRANwgGflfn2nN5GOJSBbAX8kEPbBUVm7/WQ9BwdJVG0lxR/FhpEzd8k76Y3gmle 8/wY9bgUiRUeyO7an0cL0P6lnj3OTDtQujZeZNLXD4wurtlRutDtikp6PPnk5X9E A1emTsVmr0/oGTMJJjCAX/MMhm5PIUfXc8rgngtOJ7MWlqiY15FBrszhPI0vssyK 1y15ZBssOmHIm6923vmfTB7EU6C6Iq5sqTzCXdMHFAKuU4oHauPSOKB4mIhanopC WMt8JCTJp+M/bvYIIRYV8jnApGYo9eQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:08:15 2026 by rpki-client